comment-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly extracts added comment lines and requires the report's description to include "what the comment says" (and concrete replacement text), which forces the LLM to reproduce comment text verbatim and could leak any secrets embedded in those comments.